Privacy Policy

1. Introduction

Celtic Golf Centre ("we", "us", or "our") operates celticgolfkingston.ca and the Celtic Golf Centre mobile app for our Kemptville, Kingston and Carleton Place locations. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy laws.

Using the mobile app

The app uses your name, email, phone number, account identifier and booking details to provide reservations and account services. Sign-in tokens are stored in secure device storage. Your preferred location and cached account details are stored on your device. A profile photo you select stays on that device and is not uploaded. Booking a session does not subscribe you to marketing.

Security verification for registration and guest bookings uses Google reCAPTCHA through a page on our website. Google processes information about the device and interaction to help prevent abuse. See Google’s Privacy Policy and Terms of Service. Push notifications are not offered in this release. Links to maps, booking partners and payment providers open their services, whose privacy policies also apply.

To delete your account, open Account → Delete account and confirm your password. We remove your profile, account-linked contact history and marketing recipient records, and anonymize your booking details. Existing reservations remain reserved anonymously; cancel unwanted reservations before deleting. Future recurring reservations stop. Operational backups and records held by service providers remain subject to their retention schedules and any legal obligations. Contact us for help with those records. Deleting the app alone does not delete your account.

2. Information We Collect

We collect personal information that you provide directly to us, as well as information collected automatically when you use our services:

Information you provide:

• Name, email address, and phone number
• Booking details and preferences
• Payment information (processed securely by our third-party payment processor)
• Communications and correspondence with us
• Account login credentials
• Government-issued ID (for age verification for alcohol service)

Information collected automatically:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our website
• Referring website or source
• Cookie and tracking technology data (see Section 5)

3. How We Use Your Information

We use your personal information for the following purposes:

• Processing and managing your bay bookings, lessons, and fittings
• Sending booking confirmations, reminders, and receipts
• Processing payments and refunds
• Responding to your inquiries and providing customer support
• Sending promotional communications (only with your explicit consent)
• Improving our website, services, and customer experience
• Complying with legal obligations and protecting our legal rights
• Preventing fraud and ensuring security of our services

4. Legal Basis for Processing

Under PIPEDA, we process your personal information based on:

• Consent: You have given consent for processing for specific purposes (e.g., marketing emails)
• Contract: Processing is necessary to fulfill our booking agreement with you
• Legal obligation: Processing is required to comply with applicable laws
• Legitimate interests: Processing is necessary for our legitimate business interests, provided these do not override your rights

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small text files stored on your device that help us recognize you and remember your preferences.

Types of cookies we use:

• Essential cookies: Required for the website to function properly. These include cookies for authentication, session management, and security. You cannot opt out of these cookies.
• Preference cookies: Remember your settings and preferences, such as theme selection (light/dark mode) and cookie consent choices.
• Analytics cookies: Help us understand how visitors interact with our website by collecting anonymous usage data. We use this information to improve our services.

Managing cookies:

When you first visit our website, you will be presented with a cookie consent banner allowing you to accept or decline non-essential cookies. You can change your cookie preferences at any time through your browser settings:

• Chrome: Settings → Privacy and security → Cookies
• Firefox: Options → Privacy & Security → Cookies
• Safari: Preferences → Privacy → Cookies
• Edge: Settings → Privacy, search, and services → Cookies

Please note that disabling certain cookies may affect the functionality of our website and your ability to make bookings.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected:

• Account information: Retained while your account is active. Deleting your account removes your profile and sign-in credentials from the account database
• Booking records: Scheduling and accounting records are retained for 7 years under our retention policy. Account deletion removes associated names, email addresses, phone numbers and notes from booking records
• Payment records: Retained for 7 years as required by tax law
• Marketing preferences: Retained until you withdraw consent
• Cookie data: Varies by cookie type (session cookies expire when you close your browser; persistent cookies expire after 1 year)

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• SSL/TLS encryption for all data transmitted to and from our website
• Secure password hashing for account credentials
• PCI-DSS compliant payment processing through our third-party provider
• Regular security assessments and updates
• Access controls limiting employee access to personal information

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

8. Third-Party Service Providers

We do not sell your personal information to third parties. We may share your information with trusted third-party service providers who assist us in operating our business:

• Payment processors: To securely process credit card and other payments
• Email service providers: To send booking confirmations and promotional emails
• Website hosting: To host and maintain our website
• Analytics providers: To help us understand website usage

These service providers are contractually obligated to protect your information and may only use it for the specific purposes for which we engage them.

9. International Data Transfers

Some of our third-party service providers may be located outside of Canada, including in the United States. When your personal information is transferred outside of Canada, it may be subject to the laws of those jurisdictions, which may differ from Canadian privacy laws. We take steps to ensure that any such transfers comply with PIPEDA and that your information remains protected in accordance with this Privacy Policy.

10. Your Rights Under PIPEDA

Under the Personal Information Protection and Electronic Documents Act (PIPEDA), you have the following rights regarding your personal information:

• Right to access: You may request a copy of the personal information we hold about you
• Right to correction: You may request that we correct any inaccurate or incomplete personal information
• Right to withdraw consent: You may withdraw your consent to our processing of your personal information at any time, subject to legal or contractual restrictions
• Right to deletion: You may request that we delete your personal information, subject to our legal obligations to retain certain records
• Right to complain: You have the right to file a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated

To exercise any of these rights, please contact us using the information provided in Section 14. We will respond to your request within 30 days, as required by PIPEDA.

11. Marketing Communications

We will only send you promotional emails or marketing communications if you have opted in to receive them. In accordance with Canada's Anti-Spam Legislation (CASL), each marketing email will include:

• Clear identification that the message is from Celtic Golf Centre Kingston
• Our contact information
• A simple and free unsubscribe mechanism

You may opt out of marketing communications at any time by clicking the unsubscribe link in any email or by contacting us directly. Please note that even if you opt out of marketing emails, we may still send you transactional emails related to your bookings.

12. Children's Privacy

Our website and online booking services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete such information from our systems.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will post the updated policy on this page with a revised "Last updated" date. If we make material changes, we may notify you by email or by posting a prominent notice on our website. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how we handle your personal information, please contact our Privacy Officer:

Celtic Golf Centre Kingston
785 Sir John A. Macdonald Blvd. #7J
Kingston, ON K7L 1H3
Email: kingston@celticgolfcentre.com
Phone: 613-799-4651

If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca or by calling 1-800-282-1376.